Insufficient Validation in Bitdefender Update Server and BEST Relay Components

CVE-2020-15297

What is CVE-2020-15297?

The vulnerability in Bitdefender's Update Server and BEST Relay components allows an unprivileged attacker to bypass existing mitigations, enabling unauthorized interaction with network hosts. This issue specifically impacts versions of Bitdefender Endpoint Security Tools released prior to 6.6.20.294. Users of these versions may face risks as the attacker gains the ability to execute unintended commands or access sensitive network resources.

References